Revert "Handle non-JSObject heap objects using slow-path IC stub guarded by the map."

src/objects.h

Index: src/objects.h
diff --git a/src/objects.h b/src/objects.h
index 74820c25cfa1bc2072ba1e1b3fbc8594ea23c494..1e324e6df1e3d206c8ebefc6d8cc27d6bc8b84f2 100644
--- a/src/objects.h
+++ b/src/objects.h
@@ -1756,13 +1756,6 @@ class HeapObject: public Object {
   // during marking GC.
   static inline Object** RawField(HeapObject* obj, int offset);
 
-  // Adds the |code| object related to |name| to the code cache of this map. If
-  // this map is a dictionary map that is shared, the map copied and installed
-  // onto the object.
-  static void UpdateMapCodeCache(Handle<HeapObject> object,
-                                 Handle<Name> name,
-                                 Handle<Code> code);
-
   // Casting.
   static inline HeapObject* cast(Object* obj);
 
@@ -2574,6 +2567,10 @@ class JSObject: public JSReceiver {
 
   MUST_USE_RESULT MaybeObject* NormalizeElements();
 
+  static void UpdateMapCodeCache(Handle<JSObject> object,
+                                 Handle<Name> name,
+                                 Handle<Code> code);
+
   // Transform slow named properties to fast variants.
   // Returns failure if allocation failed.
   static void TransformToFastProperties(Handle<JSObject> object,
@@ -5924,10 +5921,6 @@ class Map: public HeapObject {
     return instance_type() >= FIRST_JS_OBJECT_TYPE;
   }
 
-  bool IsJSObjectMap() {
-    return instance_type() >= FIRST_JS_OBJECT_TYPE;
-  }
-
   // Fires when the layout of an object with a leaf map changes.
   // This includes adding transitions to the leaf map or changing
   // the descriptor array.